Replace vulnerable dependency gopkg.in/square/go-jose.v2 (#6290)

Signed-off-by: hongming <coder.scala@gmail.com>
2024-11-26 11:13:36 +08:00
parent 9c962d3cbf
commit fa7c1340e3
41 changed files with 8 additions and 9255 deletions
--- a/pkg/apiserver/authentication/token/issuer.go
+++ b/pkg/apiserver/authentication/token/issuer.go
@@ -17,8 +17,8 @@ import (
 	"os"
 	"time"

+	"github.com/go-jose/go-jose/v4"
 	"github.com/golang-jwt/jwt/v4"
-	"gopkg.in/square/go-jose.v2"
 	"k8s.io/apiserver/pkg/authentication/user"
 	"k8s.io/klog/v2"